CVE ID :CVE-2026-105868 Published : Oct. 6, 2026, 5:17 p.m. | 2 hours, 11 minutes ago Description :Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload configurations that accept XML files can...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-105868 - Payload: Uploaded XML files could execute same-origin JavaScript

VERWANDTEARTIKEL

Ninja Forms plugin flaw exploited to hack WordPress sites

CVE-2026-106488 - Backstage: Improper authentication in the OIDC provider

CVE-2026-106486 - Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions

CVE-2026-105812 - Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import

CVE-2026-106459 - Backstage: Improper input validation in Sentry scaffolder actions

CVE-2026-94114 - Apache Commons BCEL: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser